summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2020-11-29Fix previous; we need to set the icmp6ev in the interface to NULLFlorian Obser
2020-11-28improve legibility of the newly introduced unref_icmp6ev() before thisChristian Weisgerber
2020-11-28Add support for multiple address pools. The parser already allowstobhe
2020-11-28An interface might have disappeared or switched rdomains while weFlorian Obser
2020-11-28Reduce code duplication by introducing unref_icmp6ev().Florian Obser
2020-11-28Handle the case of an autoconf interface changing its rdomain.Florian Obser
2020-11-27Remove redundant state change. ikev2_ikesa_delete() sets the correct state.tobhe
2020-11-27Shuffle code relating to initializing the physical interface and theKenneth R Westerback
2020-11-26Use a counter instead of random IV for AES-GCM. Security depends ontobhe
2020-11-25Fix proposal error handling. If a proposal contains an unknown transformtobhe
2020-11-25Teach route(8) about the names of the IEEE80211_F_* flags.Kenneth R Westerback
2020-11-25When processing proposed static routes (inc. default route) ignoreKenneth R Westerback
2020-11-24Fix duplicate sa->sa_cp assignment.tobhe
2020-11-23Ignore duplicate sigsha2 notify, don't fail the exchange.tobhe
2020-11-22Fix comment typo.tobhe
2020-11-21No need to update ifi->state just before setting quit to TERMINATE.Kenneth R Westerback
2020-11-21Clean up NATT hack. Pass 'frompeer' as parameter instead of manipulatingtobhe
2020-11-21No need to update resolv.conf when renewing a lease does not result in anyKenneth R Westerback
2020-11-21When REBOOT'ing it is necessary to apply_defaults() to the recordedKenneth R Westerback
2020-11-20The default lease rebind time is 7 * (expiry/8), not 8 * (expiry/7).Kenneth R Westerback
2020-11-20add -s to synopsis and usage; -S before -s in options list;Jason McIntyre
2020-11-20Add -s socket option to specify control socket. This can be useful iftobhe
2020-11-19Avoid spurious resolv.conf updates whenKenneth R Westerback
2020-11-19More sa cleanup + constify.tobhe
2020-11-18Constify sa in ikev2_pld_eap(). The parser code must not change anytobhe
2020-11-18Recognize get_link_ifa() failure (a.k.a. "invalid interface") as a fatal errorKenneth R Westerback
2020-11-18No need to call get_hw_address() from interface_state() since theKenneth R Westerback
2020-11-18Tweak debug messages around resolv.conf updating.Kenneth R Westerback
2020-11-17Remove redundant indirection via msg_parent. This is only needed intobhe
2020-11-17Fix comment sysctl(3) -> sysctl(2).Marcus Glocker
2020-11-16Reenable ikev2_init_auth() return value check. Make sure sa_stateok()tobhe
2020-11-16Backout ikev2_init_auth() return check to fix regression withtobhe
2020-11-15Document new 'dynamic' keyword to create flows from or to a dynamicallytobhe
2020-11-14Constify dktypenames and fstypenames in libc.Philip Guenther
2020-11-14Make sure not to replace 0.0.0.0 with dynamic address if it is a a networktobhe
2020-11-13addr_net is already checked in ikev2_cp_setaddr() before sessingtobhe
2020-11-12Close SA if ikev2_init_auth() fails.tobhe
2020-11-12Fail if ikev2_init_ike_auth() is entered with invalid state.tobhe
2020-11-11Cleanup after proc_init() in proc_close().tobhe
2020-11-09Use RB_FOREACH_SAFE instead of handrolling itTheo Buehler
2020-11-09Check for and handle duplicates on RB_INSERTTheo Buehler
2020-11-09Don't leak domain when freeing block list nodesTheo Buehler
2020-11-07Implement 'from dynamic', which installs flows where 'dynamic' is replacedtobhe
2020-11-07Rework source IP address setting.denis
2020-11-06Remove the -L option. A debugging tool that is no longer required.Kenneth R Westerback
2020-11-06Keep track of allowed ips pointer correctlykn
2020-11-06Add some debug output showing the exact network configurationKenneth R Westerback
2020-11-06Set correct netmask on patched addresses for debug printing.tobhe
2020-11-05Enable support for ASN1_DN ipsec identifiers.Peter Hessler
2020-11-05Handle DNS answers that are larger than the maximum imsg size (aboutFlorian Obser